Cyble finds live secrets in browser code of 35 AI-built sites
Of 22,306 AI-built sites among 1.3 million new domains, 35 exposed server-only credentials including OpenAI, Stripe, and database tokens.
1
Stories per day · 30 days
1 RSS
4 stories, newest first · one card per story
Stories tagged #secret-exposure
GitLab issue email’s only security is obscurity
GitLab issue-creation emails embed an account-wide token that can open merge requests and run CI/CD.
3
We got admin access to Baseten's production GitHub in 25 minutes
Strix autonomous hacking agent extracted a working GitHub token with repo admin rights from Baseten's public Harbor image; Baseten rotated it next day.
3
.png&w=828&q=75)
Threat Actors Are Posing as OpenAI, Anthropic and DeepSeek to Target Credentials and Secrets
GreyNoise observes scanners spoofing OpenAI, Anthropic, and DeepSeek crawler user agents to hunt leaked credentials and secrets.
3